Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7e86a3d5-f206-33d4-b00e-e0a21a07e049.roa
File:                     7e86a3d5-f206-33d4-b00e-e0a21a07e049.roa (raw, json)
Hash identifier:          B7isPdMfiVeKhOc5uNrTFkSnA0ULSmXhnidwanc9ECU=
Subject key identifier:   6B:77:E9:C8:9A:35:F0:6B:FE:47:2E:C5:2C:E9:4D:B1:12:B6:6A:1D
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720AA0D9DAF9036E7024FD80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7e86a3d5-f206-33d4-b00e-e0a21a07e049.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:a0:d9:da:f9:03:6e:70:24:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=e9109c53-0a21-414f-974f-7a3589001904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:c3:d9:4c:29:69:89:db:e2:66:a6:8c:2f:
                    33:f3:54:6c:93:fe:e4:89:29:82:7c:eb:67:b6:7c:
                    70:5b:37:46:7e:34:1e:98:ce:88:96:0e:0d:87:58:
                    bd:d4:4b:c1:7a:af:33:21:5e:96:8d:8b:d7:8d:23:
                    a5:1d:91:2a:64:67:81:58:a6:ad:9a:05:53:c7:ad:
                    c2:ed:03:24:8f:78:48:8e:f7:1e:d3:6c:fc:8b:c3:
                    14:62:31:3c:92:44:53:f6:d2:f7:02:c6:49:88:d0:
                    42:45:4d:0d:29:81:1f:01:3d:52:58:9c:37:7f:2c:
                    d3:5b:f8:5d:83:a6:56:64:f3:e7:e3:c4:bf:99:3e:
                    93:96:0f:d5:8e:de:72:8e:44:35:af:de:d2:13:65:
                    88:bf:c2:5e:4b:3a:71:54:1f:5e:f8:56:4c:fe:45:
                    5a:b2:92:dd:f5:24:9c:29:0a:bb:ab:51:c9:71:da:
                    5c:8e:6b:ec:9e:4c:cc:fd:b6:74:4c:1f:ce:2f:5b:
                    b9:38:27:3a:4f:44:32:8b:d3:73:2a:39:c7:87:ca:
                    2b:77:59:60:bf:f7:0f:4e:6b:cc:22:26:0a:44:6f:
                    8b:17:49:be:71:78:d6:8c:53:ce:d6:84:37:2f:b2:
                    54:e4:f4:fe:71:e8:11:82:62:84:5f:f4:f0:f3:82:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:77:E9:C8:9A:35:F0:6B:FE:47:2E:C5:2C:E9:4D:B1:12:B6:6A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7e86a3d5-f206-33d4-b00e-e0a21a07e049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:46:a3:00:10:00:51:49:20:1c:a2:3d:d0:b6:0d:12:bc:02:
         4f:df:47:eb:64:7a:47:e9:86:0a:81:05:34:33:c4:9f:23:c1:
         cf:7e:59:d7:34:fa:13:c5:e3:ce:30:5b:2f:ad:0d:47:91:7c:
         1d:42:47:63:14:91:22:c2:b5:0a:2c:ff:f7:b7:ae:e7:35:2b:
         de:91:ef:3a:67:16:a9:ad:17:d8:4b:cc:10:a9:f9:f7:88:24:
         a3:c1:d8:f0:1a:6a:a5:07:09:60:b5:39:b6:19:c0:69:59:b2:
         7f:7e:7d:9b:08:f9:8f:79:c6:b6:f5:10:54:3e:8e:10:f4:f2:
         16:1b:eb:1b:bd:6f:2c:b7:47:c8:e2:c7:31:77:d0:40:a4:52:
         af:9e:2f:2e:f3:d8:fb:05:8c:e3:4b:e5:5f:66:82:a3:5f:96:
         0b:fd:41:cd:fb:dd:8e:6c:7b:6f:7f:f3:ff:0e:a3:4b:36:3c:
         a2:f8:5a:f3:87:2a:b4:a0:f7:85:bc:ae:92:6d:0d:74:c2:10:
         f7:fa:da:f7:c8:c4:e1:95:70:c9:d5:83:ab:84:55:0b:54:fb:
         b3:bd:08:46:e0:bd:b1:85:1f:02:4d:75:6c:52:11:08:49:cc:
         43:d8:3d:cc:60:95:eb:af:23:90:0b:54:6a:28:76:9c:24:9d:
         95:20:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org